winph44 Privacy Policy

1 Introduction

winph44 is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is fundamental to a gaming relationship — you share personal and financial information with us because you are confident it will be handled responsibly, kept secure, and used only for the purposes described in this Policy.

This Policy is written in plain, accessible language. Where legal terminology is necessary, it is explained in context. If after reading this Policy you have any questions or concerns about how winph44 handles your data, you can contact our Data Protection Officer (DPO) directly using the contact details in Section 15. We will respond to all data-related inquiries within 15 business days.

2 Data Controller

winph44 is the data controller responsible for the personal data processed under this Policy. As data controller, winph44 determines the purposes and means of processing your personal data and is responsible for ensuring that processing complies with the Philippine Data Privacy Act of 2012 (RA 10173) and PAGCOR's data governance requirements applicable to licensed Philippine online gaming operators.

winph44 has appointed a Data Protection Officer (DPO) who is reachable via the contact information set out in Section 15 of this Policy.

3 Personal Data We Collect

winph44 collects the following categories of personal data, depending on how you interact with the Platform:

winph44 does not collect sensitive personal data (as defined in RA 10173) such as health information, religious beliefs, or political affiliations unless required by a specific regulatory obligation and with your explicit consent.

4 How We Collect Personal Data

winph44 collects personal data through the following channels:

• Directly from you — at account registration, during identity verification, when contacting support, when completing responsible gaming assessments, or when updating account profile information.
• Automated technical means — via cookies, session logs, device fingerprinting (for fraud prevention), and analytics tools that record how Members interact with the Platform.
• Payment providers — GCash, PayMaya, BDO, BPI, Metrobank, and 7-Eleven share transaction confirmation data with winph44 to facilitate deposits and withdrawals.
• Game providers — Certified third-party providers (Pragmatic Play, PG Soft, and others) share game session data with winph44 for account management and dispute resolution purposes.
• Regulatory sources — PAGCOR and AMLC may share information with winph44 in connection with compliance obligations under Philippine law.

5 Purposes & Legal Basis for Processing

winph44 processes personal data only for specified, explicit, and legitimate purposes. The legal bases under RA 10173 for each processing purpose are as follows:

• Contract performance: Processing identity, contact, financial, and gaming data is necessary to provide the winph44 service — account creation, processing deposits and withdrawals in PHP, and delivering game access.
• Legal obligation: winph44 is required by PAGCOR regulation and Philippine Anti-Money Laundering laws (AMLA, RA 9160 as amended) to collect identity and transaction data, conduct Know Your Customer (KYC) verification, and report suspicious transactions to the AMLC.
• Legitimate interest: winph44 processes technical and gaming data to detect fraud, prevent bonus abuse, maintain platform security, and improve the Member experience — activities that benefit all users without overriding individual privacy rights.
• Consent: Where winph44 sends promotional communications (SMS, email offers, bonus notifications), processing is based on your consent given at registration or subsequently via account preferences. You may withdraw consent at any time.

6 Data Sharing & Third Parties

winph44 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. winph44 shares personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• PAGCOR — as the Philippine regulator, PAGCOR has a right of access to Member data for licensing compliance and player protection purposes.
• AMLC (Anti-Money Laundering Council) — transaction records and identity data are shared with AMLC where required by Philippine AMLA obligations.
• Payment service providers — GCash, PayMaya, BDO, BPI, Metrobank, and 7-Eleven receive only the transaction data necessary to process your deposit or withdrawal.
• Game technology providers — certified providers receive a session identifier and bet data necessary to deliver games. They do not receive your full identity or financial profile.
• IT infrastructure providers — cloud hosting, content delivery, and security service providers process data on winph44's behalf under data processing agreements that impose confidentiality and security obligations consistent with RA 10173.
• Law enforcement — winph44 will disclose personal data to Philippine law enforcement agencies where required by a lawful order, court order, or legal process.

7 Data Retention

winph44 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the Member's active account plus five years following account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the transaction date in accordance with AMLA requirements.
• Gaming session data: Retained for three years for dispute resolution and player protection purposes.
• Support communications: Retained for two years following the closure of a support ticket.
• Technical logs: Retained for 12 months and then permanently deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

8 Cookies & Tracking Technologies

winph44 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, prevent fraud, and improve the user experience. The cookies used by winph44 fall into the following categories:

• Essential cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing core Platform functionality.
• Analytics cookies: Used to understand how Filipino Members use the Platform — which pages are visited, how long sessions last, and where errors occur. Data is aggregated and not linked to individual identity profiles. These cookies can be declined via your browser settings.
• Fraud prevention cookies: Device fingerprint and behavioural signals used to detect automated bot access, account takeover attempts, and multi-account abuse. These are essential to Platform integrity and cannot be disabled.

winph44 does not use third-party advertising or social media tracking cookies. No Member browsing data is shared with advertising networks.

9 Data Security

winph44 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and winph44 servers
• Passwords stored using industry-standard one-way hashing algorithms — winph44 cannot retrieve your plaintext password
• Two-factor authentication (2FA) available to all Members for additional account-level security
• Access to personal data systems restricted to authorised winph44 personnel on a need-to-know basis, with access logging
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Incident response procedures in place — winph44 will notify affected Members and the National Privacy Commission (NPC) of any personal data breach within 72 hours of discovery, as required by NPC Circular 16-03

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), registered winph44 Members have the following rights regarding their personal data:

• Right to be informed — to know what personal data winph44 holds about you and how it is used (this Policy fulfils that obligation).
• Right of access — to request a copy of the personal data winph44 holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of personal data where there is no lawful basis for continued processing (subject to PAGCOR and AMLA retention requirements, which may override this right).
• Right to data portability — to receive your personal data in a structured, machine-readable format.
• Right to object — to object to processing of your personal data based on winph44's legitimate interests, or to processing for direct marketing purposes.
• Right to lodge a complaint — to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe winph44 has violated your data rights.

To exercise any of these rights, contact winph44's Data Protection Officer using the details in Section 15. winph44 will respond to all data rights requests within 15 business days of receipt.

11 Children and Minors

winph44 does not knowingly collect personal data from individuals under 21 years of age. The Platform is strictly restricted to adults aged 21 and above, as mandated by PAGCOR regulations for Philippine online gaming operators. Age is verified at registration, and winph44 employs automated detection systems to identify potential underage users. If winph44 discovers that personal data has been collected from an individual under 21, that data will be deleted immediately and the associated account closed. If you believe a minor has registered on winph44, please contact our support team immediately at [email protected].

12 Cross-Border Data Transfers

winph44 may transfer personal data to service providers located outside the Philippines — for example, cloud infrastructure providers or game technology partners with servers in other jurisdictions. Where such transfers occur, winph44 ensures that adequate data protection safeguards are in place, including contractual data processing agreements that require recipients to comply with standards equivalent to RA 10173. winph44 does not transfer personal data to countries that the NPC has designated as not offering adequate protection without implementing additional protective measures.

13 Third-Party Links

The winph44 Platform does not contain links to third-party websites outside the winph44 domain. Where game providers are integrated directly into the Platform, they operate within the winph44 environment under data processing agreements as described in Section 6. winph44 accepts no responsibility for the privacy practices of any entity outside its own Platform and data processing chain.

14 Changes to This Privacy Policy

winph44 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. Material changes will be communicated to registered Members via on-site notification and/or SMS to the registered Philippine mobile number at least seven days before the revised Policy takes effect. The "Last Updated" date at the top of this page will be revised accordingly. Continued use of winph44 following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

15 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data rights under RA 10173, you may contact winph44's Data Protection Officer through the following channels:

• Email (plain text — not a clickable link): [email protected] — mark your message "Data Privacy Request" in the subject line
• Live Chat: Available 24/7 within the winph44 Platform — average first response under 30 minutes

winph44 is committed to resolving all data privacy inquiries promptly and professionally. If you are not satisfied with winph44's response, you have the right to escalate your concern to the Philippine National Privacy Commission (NPC), the regulatory body responsible for enforcing RA 10173.